All information that you provide to us is stored on servers within the European Union. Unfortunately, the transmission of information via the internet is not completely secure, which is why we cannot guarantee the security of the data transmitted to our website via the internet. However, we secure our website and other systems by means of technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. In particular, we transmit your personal data in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) coding system for this purpose.

6. Use of a consent management tool (CMP)

6.1

We have integrated the consent management tool “Cookiebot” (www.cookiebot.com) from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, into our website to request consent for data processing and the use of cookies or comparable functions. With the help of “Cookiebot”, you have the option to give or refuse your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalized advertising. You can use “Cookiebot” to give or refuse your consent for all functions or to give your consent for individual purposes or individual functions. You can also change the settings you have made retrospectively using the icon at the bottom left of the website you have visited.

6.2

The purpose of integrating “Cookiebot” is to allow users of our website to decide on the above matters and to offer them the opportunity to change settings that have already been made as they continue to use our website. In the course of using “Cookiebot”, personal data and information about the end devices used (IP address, language, browser, etc.) are processed and sent to Usercentrics A/S. The information about the settings you have made is also stored on your end device.

6.3

The legal basis for the processing is Art. 6 (1) 1 (c), Art. 6 (3) 1 (a), Art. 25, Art. 5 (2) GDPR and, alternatively, Art. 6 (1) (f) GDPR. We store the cookie required to store your consent on the basis of Section 25 (2) no. 2 TDDDG. Cookiebot helps us to process our users' data in order to fulfill our legal obligations (e.g. obtaining informed consent and the obligation to provide evidence thereof). Our legitimate interests in the processing of data beyond the collection and verifiability of the consent obtained lie in the evaluation of consent rates and other functionalities.

6.4

“Cookiebot” stores your data as long as your user settings are active. One year after you have made your user settings, you will be asked to confirm your consent again. The user settings made will then be stored again for this period, unless you delete the information about your user settings in the designated end device capacities yourself beforehand. We have concluded an order processing contract with Cookiebot.

6.5

You have the right to object to the processing of your personal data if the processing is based on Art. 6 Sect. 1 Clause 1 lit. f GDPR. You have the right to object on grounds relating to your particular situation. To object, please send an e-mail to mail@cookiebot.com

7. No disclosure of your personal data

We do not pass on your personal data to third parties unless you have consented to the data transfer or we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the disclosure of information for the purposes of law enforcement, to avert danger or to enforce intellectual property rights.

8. Data protection and third-party websites

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or provide any guarantee for third-party content or data protection conditions. Please ensure that you are familiar with the applicable data protection conditions before you transmit personal data to these websites.

9. Use of our website functions

9.1 

In addition to the use of our website for purely informational purposes, we offer various services that you can use if they are of interest to you. To do this, you will generally need to provide additional personal information that we use to provide the respective service. If additional voluntary information is possible, this is marked accordingly.

9.2

When you contact us by email or using the contact form, we store your email address and, if you provide it, your name and telephone number, in order to answer your questions. (The legal basis for this is Article 6(1)(b) GDPR).

10. Application process

10.1 

We process the data that you have sent to us in connection with your application in order to check your suitability for the position (or, if applicable, other open positions in our company) and to carry out the application process.

10.1.1

The legal basis for the processing of your personal data in this application process is primarily Article 6(1)(b) GDPR, as well as Section 26 of the German Federal Data Protection Act (BDSG). Accordingly, the processing of data required in connection with the decision to establish an employment relationship is permissible. Should the data be required after completion of the application process, e.g. for legal prosecution, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 (1) point f GDPR. Our interest then consists in the assertion of or defense against claims.

10.2

In the event of a rejection, applicants' data will be deleted after six months.

10.3

If you have consented to the further storage of your personal data, we will transfer your data to our pool of applicants. The data in this pool will be deleted after two years.

10.4

If you have been offered a job as part of the application process, the data will be transferred from the applicant data system to our human resources information system.

10.5

Your application data will be reviewed by the human resources department after we receive your application. Suitable applications are then forwarded internally to the department heads for the respective open position. The further procedure is then coordinated. In principle, only those persons in the company who need access to your data for the proper execution of our application process have access to it.

11. Social media profiles

11.1

We have various profiles on social media platforms. We operate these profiles with the following providers:

11.1.1

Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland, privacy policy at www.facebook.com/privacy/center 

11.1.2

Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Cala Suqare, Dublin 2, Ireland, privacy policy at privacycenter.instagram.com/policy 

11.2

We use the technical platform and services of the providers for these information services. We would like to point out that you use our social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our sites, the social media platform providers collect, among other things, your IP address and other information that is available on your device in the form of cookies. This information is used to provide us, as the account operator, with statistical information about your interaction with us. The legal basis in each case is your consent: for the setting of cookies, this is Section 25 (1) TDDDG, for the subsequent data processing, Art. 6 (1) a GDPR.

11.3

The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. The providers are certified according to the EU-US Transatlantic Data Privacy Framework. We have also agreed so-called standard data protection clauses with these providers, the purpose of which is to maintain an adequate level of data protection in the third country. We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. The data processing may differ depending on whether you are registered with the social network and logged in or visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track your movements on the web. Buttons embedded in websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to offer you customized content or advertising. If you wish to avoid this, you should log out or disable the “stay logged in” function, delete the cookies on your device and restart your browser.

11.4

As the provider of the information service, we only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 (1) 1 lit. f GDPR.

11.5

To exercise your rights as a data subject, you can contact us or the provider of the social media platform. If one party is not responsible for answering or the information must be obtained from the other party, we or the provider will forward your request to the respective partner. Please contact the operator of the social media platform directly if you have any questions about the creation of profiles or the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our site, please write to us using the contact details provided above.

11.6

The providers describe what information the social media platform receives and how it is used in their data protection declarations (see link in the table above). You will also find information there about how to contact the providers and how to adjust your settings for advertisements. You can also find more information about social networks and how to protect your data at www.youngdata.de.

12. Third-party tools

12.1 

Use of Google Tag Manager

12.1.1

This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data.

12.1.1.2

The tool causes other tags to be activated which may collect data under certain circumstances. Google Tag Manager does not access this data. If you have opted out at the domain or cookie level, this will remain in effect for all tracking tags implemented with Google Tag Manager.

12.1.1.3

We use Google Tag Manager to make it easier to manage and develop our website. Google Tag Manager is used to efficiently control content on different pages, reduce the potential for errors, prevent outdated processes and thus also ensure a secure user experience. The legal basis for this use is Art. 6 (1) (a) GDPR.

12.2 Use Google Analytics

12.2.1 

This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to improve our services and make them more interesting for you as a user by means of the statistics and reports obtained.

12.2.2

We primarily use cookies, device/browser data, IP addresses and website or app activity to track interactions between you as a user of the website and our website. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about which country, region or city the respective user comes from (so-called “IP location”). For your protection, however, we use the anonymization function (“IP masking”), i.e. Google shortens the IP addresses within the EU/EEA by the last octet.

12.2.3

Google acts as a processor and we have concluded a corresponding contract with Google. The information generated by the cookie and the (usually abbreviated) IP addresses regarding your use of this website are usually transmitted to a Google server in the United States and processed there. The provider is certified according to the EU-US Transatlantic Data Privacy Framework. We have also agreed so-called standard data protection clauses with this provider, the purpose of which is to maintain an adequate level of data protection in the third country.

12.2.4

The legal basis for the collection and further processing of the information (which is carried out for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Any necessary cookies are also only set with your consent in accordance with § 25 para. 1 TDDDG. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to withdraw consent is to use our Consent Manager or to install the Google browser add-on, which is available at the following link: tools.google.com/dlpage/gaoptout?hl=de.

12.2.5

You can find more information about the scope of services provided by Google Analytics at marketingplatform.google.com/about/analytics/terms/de/. Information on data processing when using Google Analytics is provided by Google at the following link: support.google.com/analytics/answer/6004245?hl=de. General information on data processing, which Google says also applies to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

12.3 Embedding YouTube videos

12.3.1

We have embedded YouTube videos in our online offering. These are stored on YouTube.com and can be played directly from our website. [These are all embedded in “extended data protection mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. The data referred to in paragraph 2 will only be transferred if you play the videos. We have no influence over this data transfer.] The legal basis for displaying the videos is Art. 6 (1) sentence 1 a GDPR, i.e. the videos are only embedded with your consent. We set the cookie required to play the videos in accordance with Section 25 (2) no. 2 TDDDG, as this is a mandatory technical requirement.

12.3.2

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the aforementioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this information to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as a user profile and uses it for the purposes of advertising, market research and/or designing its website to meet user needs. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of this user profile, but you must contact YouTube to exercise this right.

12.3.3

The information collected is stored on Google servers, including in the United States. The provider is certified under the EU-US Transatlantic Data Privacy Framework. We have also agreed so-called standard data protection clauses with this provider, the purpose of which is to maintain an adequate level of data protection in the third country.

12.3.4

Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. This also provides further information about your rights and settings options for protecting your privacy: www.google.de/intl/de/policies/privacy.

12.4 Use of Elfsight